Sr Security Engineer - 11917
Coupa Software1 month ago
Pune, IndiaSenior
Responsibilities
- Architect and build multi-cloud security controls, including VPC segmentation, security groups/NACLs, IAM least-privilege policies, permission boundaries, and Organizations/SCP guardrails.
- Build policy-as-code and infrastructure-as-code security guardrails integrated into CI/CD pre-merge and pre-deploy gates.
- Harden containerized workloads through image scanning, admission control, pod security standards, and runtime detection.
- Develop automated remediation for cloud misconfigurations and configuration drift.
- Own the vulnerability management program and lead technical response to security incidents and vulnerability findings, including forensics, containment, root-cause analysis, and remediation.
- Translate audit and compliance requirements into technical controls and automate evidence collection using cloud telemetry and GRC tooling.
- Mentor security engineers through design reviews, threat modeling, and code and architecture reviews.
- Own security tooling reference architectures, threat models, and runbooks, and participate in improving the on-call rotation.
Requirements
- 10+ years of security engineering experience, including significant hands-on experience securing production cloud environments at scale and leading projects or mentoring engineers.
- Deep hands-on AWS security expertise with IAM, VPC/networking, KMS, GuardDuty, Security Hub, Config, and Organizations/SCPs; GCP or Azure security experience is a plus.
- Production experience with Terraform or equivalent infrastructure-as-code and policy-as-code frameworks, plus container and Kubernetes security tooling.
- Strong software engineering fundamentals with Python and/or Go, Git-based workflows, and CI/CD security integrations including SAST, DAST, and SCA.
- Experience with SIEM/SOAR platforms and vulnerability management tools such as Wiz, Qualys, or Tenable, including building detections and workflows.
- Working knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53 sufficient to translate control requirements into engineering work.
- Strong written and verbal communication skills for technical documentation and explaining risk trade-offs to auditors and engineering leadership.
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
- CISSP, CCSP, CISA, or AWS/GCP security certifications are preferred.
- Some international travel may be required.
Benefits
- Two company-wide paid wellness days annually.
- Paid birthday time off.
- 40 hours of paid volunteer time off annually.
- Free confidential 24/7/365 Employee Assistance Program resources, including counseling, financial advice, legal guidance, and new-parent support.
- Business travel protection through Zurich Travel Assist.
- Employee referral bonus program.
- Location-specific benefits may include medical and dental insurance, retirement or pension plans, and life or accident protection.
Categories
About Coupa Software
Coupa Software provides a cloud-based spend management platform used by enterprises to manage procurement, sourcing, invoicing, and supplier interactions. It sells SaaS subscriptions and services that help finance and operations teams control and analyze business spending across a large buyer–supplier network. Founded in 2006 and headquartered in Foster City, California, Coupa is privately held under Thoma Bravo ownership and serves global customers across many industries.